Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240541 7.5 危険 jupiter cms - Jupiter CMS における SQL インジェクションの脆弱性 - CVE-2006-4876 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240542 5 警告 jupiter cms - Jupiter CMS におけるピクチャファイルをアップロードされる脆弱性 - CVE-2006-4875 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240543 4.3 警告 jupiter cms - Jupiter CMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4874 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240544 5 警告 jupiter cms - Jupiter CMS における重要な情報を取得される脆弱性 - CVE-2006-4873 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240545 7.5 危険 keyvan1 - Keyvan1 ECardPro の search.asp における SQL インジェクションの脆弱性 - CVE-2006-4872 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240546 7.5 危険 keyvan1 - Keyvan1 EShoppingPro の search_run.asp における SQL インジェクションの脆弱性 - CVE-2006-4871 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240547 7.5 危険 perlunity - phpunity.postcard の phpunity-postcard.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4869 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240548 7.5 危険 mohammed mehdi panjwani - Mohammed Mehdi Panjwani Complain Center の loginprocess.asp における SQL インジェクションの脆弱性 - CVE-2006-4861 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240549 10 危険 limbo cms - Limbo CMS の index.php などにおける脆弱性 - CVE-2006-4860 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
240550 7.5 危険 limbo cms - Limbo CMS の contact コンポーネントにおける images/contact フォルダへ PHP コードをアップロードされる脆弱性 - CVE-2006-4859 2012-09-25 15:35 2006-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268911 6.1 MEDIUM
Network
debian
websvn
debian_linux
websvn
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php. CWE-79
Cross-site Scripting
CVE-2016-2511 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
268912 7.5 HIGH
Network
nodejs
fedoraproject
node.js
fedora
The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response… CWE-20
 Improper Input Validation 
CVE-2016-2216 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
268913 8.1 HIGH
Network
beanshell
debian
canonical
beanshell
debian_linux
ubuntu_linux
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, … CWE-19
 Data Processing Errors
CVE-2016-2510 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
268914 6.5 MEDIUM
Local
qemu
canonical
debian
qemu
ubuntu_linux
debian_linux
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbit… CWE-331
 Insufficient Entropy
CVE-2016-2858 2024-11-21 11:48 2016-04-8 Show GitHub Exploit DB Packet Storm
268915 6.5 MEDIUM
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitra… CWE-787
 Out-of-bounds Write
CVE-2016-2292 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
268916 6.5 MEDIUM
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of ser… CWE-125
Out-of-bounds Read
CVE-2016-2291 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
268917 8.8 HIGH
Network
schneider-electric proface_gp-pro_ex_pfxexedls
proface_gp-pro_ex_pfxexedv
proface_gp-pro_ex_ex-ed
proface_gp-pro_ex_pfxexgrpls
Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrar… CWE-787
 Out-of-bounds Write
CVE-2016-2290 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
268918 6.3 MEDIUM
Local
rockwellautomation integrated_architecture_builder IAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file. CWE-284
Improper Access Control
CVE-2016-2277 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
268919 7.5 HIGH
Network
eaton_lighting_systems eg2_web_control Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie. CWE-284
Improper Access Control
CVE-2016-2272 2024-11-21 11:48 2016-04-7 Show GitHub Exploit DB Packet Storm
268920 9.8 CRITICAL
Network
patterson_dental eaglesoft Patterson Dental Eaglesoft 17 has a hardcoded password of sql for the dba account, which allows remote attackers to obtain sensitive Dental.DB patient information via SQL statements. NVD-CWE-Other
CVE-2016-2343 2024-11-21 11:48 2016-04-2 Show GitHub Exploit DB Packet Storm